full-disclosure - Re: [MailServer Notification]To recipient: Message matched eManager setting and action was taken.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200512291036.jBTAacSn018646@turing-police.cc.vt.edu>
Date: Thu Dec 29 10:36:58 2005
From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: Re: [MailServer Notification]To recipient:
	Message matched eManager setting and action was taken. 

On Wed, 28 Dec 2005 15:24:02 EST, Michael Holstein said:
> >Rule/Policy: Sexual Discrimination
> 
> Ha .. so not only do they have a misconfigured copy of Trend eMail 
> scanner (eg: bounce to list) .. they try to flag on "sexual 
> discrimination" words.
> 
> Probably one of the flamers calling another flamer a "homo" or some such.

I've found that calling somebody a "fucking idiot" won't trigger most of those
scanners, but saying that something is "a real bitch to configure correctly"
will.  Go figure. ;)

ObSecurity:  What ways can you think of to abuse this?  Use it as a DDoS
vector by forging the From: to bounce to?  Creative ways of excluding one
recipient of an e-mail discussion?  Other novel uses? ;)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20051229/2f81be1f/attachment.bin